Conference recordings are now online!

We've highlighted a few talks worth checking out:

• MSIX’d Up: Weaponizing the Modern Windows App Packaging Ecosystem. The talk demonstrates EDR evasion using MSIX application packages for Windows, lateral movement using WMI and DCOM technologies, and privilege escalation to SYSTEM through a logic flaw in the package installer service.

• Prompt Critical: AI-driven Weaponization of a UniFi OS RCE Chain. The researcher demonstrates unauthenticated root access to UniFi OS Server, a system for managing network equipment. A stolen JWT signing key allows administrative access to persist after patching until the key is rotated.

• Breaking the Warehouse: From Bluetooth Devices to Operational Control. The authors examine three scenarios: arbitrary command execution on a computer through a Bluetooth barcode scanner, bypassing application launch restrictions on an Android terminal, and gaining network access through a thermal printer.

• DevPUBdency Confusion: Weaponizing the Flutter Supply Chain. The research shows how to extract private dependency names from the APK file of an application built with the Flutter framework, substitute packages, and execute code on a developer’s computer during project setup.

• PleaseFix: How AI Agent Browsers Are Undoing Decades of Security Engineering. The author shows how prompt injections on webpages and in calendar invitations exploit browsers with AI agents to take over accounts, steal data, and execute code on the user’s computer.